Description of problem:

/etc/rhsm/rhsm.conf is pointing to correct certificate:

# grep repo_ca_cert /etc/rhsm/rhsm.conf
repo_ca_cert = %(ca_cert_dir)scandlepin-local.pem

But subscription manager config defaults to a default value:

# subscription-manager config | grep repo_ca_cert
   repo_ca_cert = [/etc/rhsm/ca/redhat-uep.pem]

This means that /etc/yum.repo.d/redhat.repo contains invalid certificate:

# grep sslcacert /etc/yum.repos.d/redhat.repo 
sslcacert = /etc/rhsm/ca/redhat-uep.pem
sslcacert = /etc/rhsm/ca/redhat-uep.pem
[...]

Version-Release number of selected component (if applicable):

subscription-manager-1.9.1-1.el6.x86_64

How reproducible:

Every time

Steps to Reproduce:
1. Install Katello 1.3 server
2. Kickstart a machine with RH6.4
3.

Actual results:


Expected results:


Additional info:

Works as expected with subscription-manager-1.1.23.1-1.el6_4.x86_64